docs: README, AGPL-3.0 LICENSE, Code Health CI + scorecard

.gitea/workflows/ci.yml

@@ -60,6 +60,28 @@ jobs:
             dotnet test $t.FullName -c Release
             if ($LASTEXITCODE -ne 0) { throw "dotnet test failed for $($t.FullName)" }
           }
+  health:
+    name: Code Health
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Scan with desloppify (CI profile, objective only)
+        continue-on-error: true
+        run: pipx run --spec desloppify desloppify scan --profile ci --path src
+      - name: Upload scorecard
+        uses: actions/upload-artifact@v3
+        with:
+          name: desloppify-scorecard
+          path: scorecard.png
+          if-no-files-found: ignore
   release:
     needs:
       - build-and-test